Red Hat Bugzilla – Bug 967199
lightdm doesn't start with SELINUX=enforcing
Last modified: 2013-05-30 11:51:45 EDT
Description of problem:
LightDM can't start with SELINUX=enforcing.
"Permissive" or "Disabled" - ok.
Version-Release number of selected component (if applicable):
* Fedora 18 (i686)
* lightdm-razorqt-0.5.2-8.fc18.i686 (lightdm greeter)
Steps to Reproduce:
1. yum install lightdm-razorqt
2. /etc/sysconfig/desktop: DISPLAYMANAGER=/usr/sbin/lightdm
3. /etc/selinux/config: SELINUX=enforcing
4. init 6
Problem appeared during creating QtDesktop spin (http://fedoraproject.org/wiki/QtDesktop_Spin).
After "yum remove selinux-policy" and install it again lightdm started ok.
Now QtDesktop's *.ks contains "selinux --permissive".
For what it's worth, during testing, I set selinux in permissive to get lightdm with lightdm-razorqt greeter to start ok. But I couldnt find anything relevant in /var/log/audit/audit.log (nothing mentioning lightdm anyway).
Could it be tested with
# semodule -DB
re-test it and
# ausearch -m avc,user_avc -ts recent |audit2allow
sealert finally showed me the denial, see bug #969090
*** This bug has been marked as a duplicate of bug 969090 ***